Behind the scenes of the Socksescort takedown
About this episode
This episode features Chris Formosa discussing the Socksescort disruption and its implications for edge devices and cybersecurity.
In this episode, we sit down with Chris Formosa to break down the Socksescort disruption—a proxy botnet powered by AVRecon that compromised edge devices at scale. Chris walks us through why the operation was so dangerous, how investigators tracked its command-and-control infrastructure, and what changed between the 2023 disclosure and the eventual takedown in coordination with the Department of Justice. We also dig into why edge devices remain prime targets, where most organizations still have visibility gaps, and what the next evolution of this threat could be. In our reporter chat, Greg Otto and Tim Starks break down DarkSword, a iOS exploit kit that could impact hundreds of millions of people.
More episodes of Safe Mode Podcast
- Proving Identity in the age of agents
- The federal government's most underrated cybersecurity tool
- What does industry think of the White House's cybersecurity strategy?
- When iPhone exploits turn into commodities
- What comes next for Trump's cybersecurity plan?
- A plea to improve quantum security in the federal government
Explore listener stats, chart rankings, contacts and more on the Safe Mode Podcast podcast page.